Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/KUANGSHIH/0/3130332e3133362e3231302e302f32332d3234203d3e203137353032.roa
File:                     3130332e3133362e3231302e302f32332d3234203d3e203137353032.roa (raw, json)
Hash identifier:          iW1ZLD2xVMVzTgjKNYmVbGt8qDm7cZnk4mm0FDu/bKA=
Subject key identifier:   AC:4F:A4:1E:41:B8:44:5E:A0:93:E2:08:C1:A6:BC:17:59:90:6D:D7
Certificate issuer:       /CN=E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5
Certificate serial:       636CBD42566B00DE0B752ACDDE6F78F09F180C48
Authority key identifier: E0:69:CB:FD:23:4F:1A:B4:E5:40:FE:D5:E8:E3:A1:6D:0F:29:87:A5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/3130332e3133362e3231302e302f32332d3234203d3e203137353032.roa
Signing time:             Mon 11 May 2026 17:11:38 +0000
ROA not before:           Mon 11 May 2026 17:06:38 +0000
ROA not after:            Mon 10 May 2027 17:11:38 +0000
asID:                     17502
IP address blocks:        103.136.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl
                          rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6c:bd:42:56:6b:00:de:0b:75:2a:cd:de:6f:78:f0:9f:18:0c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5
        Validity
            Not Before: May 11 17:06:38 2026 GMT
            Not After : May 10 17:11:38 2027 GMT
        Subject: CN=AC4FA41E41B8445EA093E208C1A6BC1759906DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:c4:8b:81:f7:4c:80:f6:76:40:22:39:8a:
                    e7:db:c6:1b:2e:de:8c:7c:64:62:62:d6:71:ef:d8:
                    d4:34:00:cd:d0:b9:9b:cf:a0:d8:c8:a8:1f:bb:f8:
                    bb:5a:75:f6:09:4b:aa:6d:71:87:2d:75:9d:86:61:
                    69:01:7f:fd:05:20:7e:ba:4e:b5:79:65:1c:bc:61:
                    bf:2c:e4:00:71:7c:02:38:26:c6:d1:26:d4:cf:3e:
                    ae:dd:2b:ba:de:2d:de:49:70:87:a4:82:06:a6:9c:
                    8d:62:86:d0:f6:92:30:43:21:e5:10:d7:12:19:09:
                    2c:24:5b:b9:11:36:df:03:22:b9:cd:d8:46:60:ca:
                    1a:24:02:f2:a1:1c:bf:6f:2c:33:a0:ca:3a:89:74:
                    c2:e1:6a:ef:2a:e4:df:67:4a:be:b9:07:8b:17:a8:
                    0e:cd:57:3f:b7:28:db:a4:44:c2:1e:f0:4b:3e:26:
                    d9:ae:ff:3d:a7:6d:6f:0a:7d:7d:4a:41:1d:25:cb:
                    70:45:8d:61:df:56:6e:46:fb:7c:0e:7e:16:94:97:
                    8a:30:11:67:b3:a2:fc:75:9b:1b:dc:6a:bf:ba:68:
                    00:e2:2c:8c:1b:ab:23:38:af:9a:2e:64:6d:8d:d5:
                    b6:2d:15:54:98:29:c0:87:8d:2e:1d:38:6d:1e:08:
                    04:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4F:A4:1E:41:B8:44:5E:A0:93:E2:08:C1:A6:BC:17:59:90:6D:D7
            X509v3 Authority Key Identifier:
                keyid:E0:69:CB:FD:23:4F:1A:B4:E5:40:FE:D5:E8:E3:A1:6D:0F:29:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/3130332e3133362e3231302e302f32332d3234203d3e203137353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:2b:7e:d8:df:81:08:87:c0:a6:9b:ac:67:1a:98:1a:5b:c8:
         38:1f:86:03:37:b8:d9:00:da:82:e1:84:56:49:f6:8b:84:3f:
         22:fc:6a:35:09:a4:70:6e:da:92:4b:f1:89:35:1d:8f:e5:1c:
         10:d3:c8:a2:70:48:10:58:01:be:57:93:68:d6:3a:8c:99:9d:
         6e:2b:24:57:02:fb:5c:98:83:da:c6:d3:68:12:0a:44:64:f3:
         ac:b7:dd:09:66:d0:cb:83:75:b8:36:ed:9b:9d:fa:cd:92:6e:
         12:2d:f9:e8:f7:af:e3:ed:b3:07:01:8b:70:3e:bc:8d:a7:ac:
         0e:51:86:72:06:a1:a9:6d:61:b0:1f:64:6c:55:57:ae:79:d0:
         8e:c3:0f:c1:94:cc:ad:bd:d2:40:cd:e1:dc:82:b2:01:60:7b:
         06:f8:7b:5e:a7:49:b7:ab:d8:4b:d7:9a:2a:ad:84:1c:01:7a:
         0c:6a:dc:4c:d1:a1:27:bd:50:ae:25:be:69:db:08:6c:99:9f:
         90:10:bc:b8:83:4a:75:c1:17:d1:21:de:1c:6e:48:2a:5a:0b:
         8b:0a:15:3e:e1:f1:8f:95:ec:87:84:24:26:14:0d:04:27:f9:
         e8:0a:53:ae:df:5d:db:29:74:7b:e1:37:8a:2f:b2:c5:28:98:
         b2:8b:94:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:25 2026 by rpki-client